Green test: middleware_spec, context: when incoming request has no auth header